CVE-2020-15252
published 2020-10-16CVE-2020-15252: In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context…
PriorityP356high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
3.22%
86.6th percentile
In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. This is patched in XWiki 12.5 and XWiki 11.10.6.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| xwiki | xwiki | < 11.10.6 | 11.10.6 |
| xwiki | xwiki | >= 12.0 < 12.5 | 12.5 |
| xwiki | xwiki-platform | < 11.10.6 | 11.10.6 |
| xwiki | xwiki-platform | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
RCE in XWiki
osv·2020-10-16
CVE-2020-15252 [HIGH] RCE in XWiki
RCE in XWiki
### Impact
Any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution.
### Patches
It has been patched in both version XWiki 12.5 and XWiki 11.10.6.
### Workarounds
The only workaround is to give SCRIPT right only to trusted users.
### References
https://jira.xwiki.org/browse/XWIKI-17423
It's been reported by the GitHub Security Lab under https://jira.xwiki.org/browse/XWIKI-17141.
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki](https://jira.xwiki.org)
* Email us at [our security mailing list](mailto:[email protected])
GHSA
RCE in XWiki
ghsa·2020-10-16
CVE-2020-15252 [HIGH] CWE-74 RCE in XWiki
RCE in XWiki
### Impact
Any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution.
### Patches
It has been patched in both version XWiki 12.5 and XWiki 11.10.6.
### Workarounds
The only workaround is to give SCRIPT right only to trusted users.
### References
https://jira.xwiki.org/browse/XWIKI-17423
It's been reported by the GitHub Security Lab under https://jira.xwiki.org/browse/XWIKI-17141.
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki](https://jira.xwiki.org)
* Email us at [our security mailing list](mailto:[email protected])
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5hv6-mh8q-q9v8https://jira.xwiki.org/browse/XWIKI-17141https://jira.xwiki.org/browse/XWIKI-17423https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5hv6-mh8q-q9v8https://jira.xwiki.org/browse/XWIKI-17141https://jira.xwiki.org/browse/XWIKI-17423
2020-10-16
Published